Skip to content
OpenAdvisories
Unscored CVE-2022-26555 EUVD-2022-31111GHSA-8c5g-f7r4-f5x9

A stored cross-site scripting (XSS) vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scr…

Published Mar 20, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box.

References